Vulnerabilities

Summary — last 7 days

New vulnerabilities5,463▲ 2,677 vs. last week
Critical / high3,044▲ 1,725 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)165▼ 39 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)2.8%—Push-dir Project Push-dir2/28/20206/17/2026
push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.
Orbitaley — Vulnerabilities